PDF version
Transcription
PDF version
European Commission – Directorate-General Justice With financial support from Fundamental Rights and Citizenship Programme The Analysis of Target Group Needs in Italy and Lithuania 2010-2011 This publication has been produced with the financial support of the Fundamental Rights and Citizenship programme of the European Commission. The contents of this publication are the sole responsibility of the Lithuanian consumer institute and CODACONS and can in no way be taken to reflect the views of the European Commission. 1 CONTENTS 1. The Analysis of Target Group Needs in Italy.............................................................................................3 1.1. Internet Usage ........................................................................................................................................3 1.2. Personal Data..........................................................................................................................................7 1.2.1. Understanding personal data.............................................................................................................7 1.2.2. Publication of personal data on the Internet......................................................................................8 1.2.3. Understanding threats of disclosure of personal data on the Internet .............................................12 1.2.4. Privacy violations on the Internet ...................................................................................................16 1.3. Protection of Personal Data ................................................................................................................19 1.3.1. Measures to ensure better protection of children‘s personal data on the Internet...........................19 1.3.2. Privacy policy ................................................................................................................................22 1.3.3. Implementation of rights of data subjects .......................................................................................25 1.4. Conclusions ...........................................................................................................................................28 2. The Analysis of Target Group Needs in Lithuania..................................................................................34 2.1. Internet Usage ......................................................................................................................................34 2.2. Personal Data........................................................................................................................................38 2.2.1. Understanding personal data...........................................................................................................38 2.2.2. Publication of personal data on the Internet....................................................................................40 2.2.3. Understanding threats of disclosure of personal data on the Internet .............................................44 2.2.4. Privacy violations on the Internet ...................................................................................................46 2.3. Protection of Personal Data ................................................................................................................49 2.3.1. Measures to ensure better protection of children‘s personal data on the Internet...........................49 2.3.2. Privacy policy ................................................................................................................................51 2.3.3. Implementation of rights of data subjects .......................................................................................53 2.4. Conclusions ................................................................................................................................................. 56 Appendix I. Questionnaires............................................................................................................................61 2 1. The Analysis of Target Group Needs in Italy 1.1. Internet Usage According to the survey results, the most common activities performed on the Internet by young people are collectiing any kind of information and loading information about themselves and their friends. Downloading music and films shares almost the same popularity, while chatting with strangers is well known as risky and it is not performed with frequency (Figure 1). Every day Several times a week Once a month Several times a year Collection of information on the Internet 39% Load (circulation) information about yourself or your friends (photos, video clips, text messages and etc.) 39% Download music, films, etc. 38% Chat with an unknown person on the Internet 16% I don't do this 31% 22% 21% 14% 12% 5% 14% 8% 18% 12% 13% 17% 14% 13% 13% 43% 2% Other activities 8% 4% 3% 0% 20% 84% 40% 60% 80% 100% Figure 1. How often do children carry out these activities on the Internet? 3 Looking at the graph results (Figure 2), we can state that parents consider that the most frequent activity that their children carry out is the collection of information on the Internet, while the least frequent is chatting with an unknown person. Every day Several times a week Once a month Several times a year They don't do this I don't know Download music, films, etc. Chat with an unknown person on the Internet Load (circulation) information about himself/herself or his/her friends (photos, video clips, text messages and etc.) 16% 22% 6%3% 3%9% 13% 13% 9% 28% 38% 41% 3% 13% 28% 9% 9% 38% 3% 25% Collection of information on the Internet 31% 13% 6% 22% 3% Other activities 3% 6% 0% 88% 20% 40% 60% 80% 100% Figure 2. Awareness of parents about the activities carried out on the Internet by their children (analysis of the answers to the question „How often do your children carry out these activities on the Internet”). The acquired results indicate that FACEBOOK is the most popular social network: 66% of young people questioned use it every day, 16% many times a week, 7% once a month and 2% many times a year, while only 9% do not use it at all. On the opposite side, ORKUT is the least popular, since 97% of the respondents do not use it at all. Only 2% of young people questioned use ORKUT daily, just one user logs in to it many times a week and one many times a year. The unpopularity of the others social networks, as compared with FACEBOOK, is characterized by the following numbers of users who are not even registered: LINKEDIN (the 96% of young people questioned 4 do not use it at all), FLICKER (94%), FOTOLOG (162), NETLOG (91%), BADOO (83%), MYSPACE (84%), TWITTER (83%). Finally, there are young people, among the ones interviewed, who responded that they used other social networks not listed in the questionnaire. Their use can be expressed in the following measures: daily access (10%), many times a week (10%), once a month (2%), and many times a year (1%), as shown on Figure 3. Dayly Once a month 8,67% 2,31% 7,51% 15,61% Facebook Many times a year 82,66% 90,75% 1,16% 0,58% 3,47% 4,05% Myspace 5,20% 5,78% 1,73% 3,47% Badoo 1,16% 2,31% 4,62% 5,78% Orkut 0,58% 0% 0,58% 1,73% Flickr 1,73% 1,73% 2,31% 0% Linkedin 2,31% 0% 1,16% 0,58% Fotolog 0,58% 2,31% 2,31% 1,16% Others 1,16% 2,31% 0% I don't use it 65,90% 1,73% 6,36% 1,73% 7,51% Twitter Netlog Many times a week 83,82% 83,13% 97,11% 94,22% 95,95% 93,64% 76,30% 9,83% 10,40% 20% 40% 60% 80% 100% 120% Figure 3. How often do children these social networks, dating sites? Parents who participated in the survey were asked whether they were registered users of social networks / dating sites (Figure 4). The possible response options were: NETLOG, FLICKR, BADOO, ORKUT, 5 MYSPACE, LINKEDIN, TWITTER, FACEBOOK, FOTOLOG, MAMMACHECLUB and PARENTSCONNECTS. 38% of the respondents are registered in none of the listed networks; while the ones who use social network prefer FACEBOOK (59%), BADOO (13%) and MYSPACE (9%). Similarly, teachers were asked which social networks / dating sites they were registered at (Figure 4). Majority of the respondents are registered in none of the listed networks (67%); while 30% use FACEBOOK and a small percentage (7%) are registered in MYSPACE. Only 4% are registered in a social network different from the ones listed. Parents I am not registered 67% 38% 30% Facebook 59% 7% 9% Myspace Badoo Teachers 0% 13% Others 0% 4% 0% Parents connects 0% Mammacheclub 0% 0% Fotolog 0% 0% Twitter 0% 0% Linkedin 0% 0% Orkut 0% 0% Flickr 0% 0% Netlog 0% 0% 0% 20% 40% 60% 80% Figure 4. Popularity of social networks and dating sites among parents and teachers (analysis of the answers to the question “Which of these social networks/dating sites are you a registered user?”) 6 1.2. Personal Data 1.2.1. Understanding personal data The majority of children (95%) considered that name and surname are the most common personal data, followed by home address (53%), personal code (47%), mobile phone number (45%), e-mail address (38%), photos (34%), information related to person’s religious beliefs (16%), information related to health (20%), and finally father’s name (12%) and school name (12%), as shown on Figure 5. The totality of the parents (100%) considered that name and surname are the most common personal data, followed by mobile phone number (75%), home address (53%), e-mail address (41%), photos (34%), personal code (28%), father’s name (28%), information related to person’s religious beliefs (25%), information related to health (19%), and finally school name (3%). The majority of teachers (93%) considered that mobile phone number is the most common personal data, followed by home address and information related to health (74%), photos (67%), e-mail address (56%), information related to person’s religious belief (33%), personal code (30%), name and surname (23%) and finally father’s name (11%). The teachers interviewed have not identified the school name as personal data (Figure 5). 7 Children Teachers 23% Name & surname 100% 94,80% Mobile phone number 75% 44,51% Home address 67% 34% 34,10% E-mail address 41% 38,15% Health data 56% 74% 19% 20,23% 30% 28% Personal code Religious belief 25% 15,61% 11% Father's name 11,56% 0% 3% 0% 93% 74% 53% 52,60% Photo School name Parents 47,40% 33% 28% 11,56% 20% 40% 60% 80% 100% 120% Figure 5. Analysis of the children, parents and teachers answers to the question “What, in your opinion, is personal data?” 1.2.2. Publication of personal data on the Internet Children were asked to identify the categories of personal data which they provide on Internet websites (Figure 6). While the majority does not provide this kind of personal data, the ones who do are more likely to publish their name and surname (24%) as well as their e-mail addresses (21%). It is interesting to underline the high number of young people that sometimes provide their school name (38%) and extracurricular activity groups (26%) 8 Always Extracurricular activity group Sometimes Never 63,01% 27,75% 7,51% 1,73% 66,47% 19,65% Your faith Illnesses you have Often 9,83% 4,05% 86,71% 8,67% 4,05% 0,58% 41,62% 37,57% School name 11,56% 9,25% 81,50% 14,45% Home address 1,73% 2,31% ID number 2,31% 1,16% 84,39% 12,14% 16,76% E-mail address 43,93% 17,92% 21,39% 59,54% 32,95% Telephone number 4,62% 2,89% 10,98% Name & surname 45,09% 20,23% 23,70% 0% 20% 40% 60% 80% 100% Figure 6. Which information about themselves do children provide on Internet sites? The survey indicated that 52% of children aged 13-18 have answered “sometimes” to the question “Do you provide correct personal data - name, surname, date of birth, etc. - when registering in various sites on the Internet?”. Only 14% never provide their personal data, while the 10% always do. Between these opposite habits, there is a percentage of 11% of young people that do not register when they are asked to provide their personal data besides 13% that offer this information quite often (Figure 7). 9 If I am asked to provide my personal data, I don't do it 11% Always 10% Often 13% Never 14% Sometimes 52% Figure 7. Analysis of children’s answers to the question “Do you provide correct personal data name, surname, date of birth, etc. - when you register on various Internet websites?” As it comes to providing correct (unfabled) information to those with whom children socialise online, 39% of children who participated in the survey answered that they do it sometimes, while 27% never do. The ones who always provide their real personal data comprise 19% of survey participants and the ones who do it often are 15%. Therefore, the majority of the young people questioned provide real information about themselves while communicating in the Internet, even if with different frequency (Figure 8). Always 19% Never 27% Often 15% Sometimes 39% 10 Figure 8. Analysis of children’s answers to the question “When communicating on the Internet (for ex. in social networks or dating sites) do you provide correct information about yourself for those with whom you socialise?” As seen on Figure 9, the research indicates that 35% of children receive consent from their friends just sometimes to share their personal data (photos, information about certain details of their lives) on the Internet, while 25% always ask for consent and 13% do it often. Finally, we have similar percentages of young people who think it is not necessary to ask for consensus of their friends (15%) and who do not publish data of other people (12%). I do not publish my friend data 12% Sometimes 35% Often 13% I don't think it is necessary 15% Always 25% Figure 9. Analysis of children’s answers to the question “Do you receive a consent from your friends before publishing their personal data (photos, information about certain details of their lives) on the Internet”? 59% of the parents responded that they never publish information related to their daughter's/son's personal data (their photos, information on certain details of their lives) on the Internet, while only 35% do it sometimes. Just 6% do it often (Figure 10). Absolute majority of teachers (89%) responded that they never publish information related to schoolchildren's personal data (their photos, information on certain details of their lives) on the Internet, while 11% acknowledged that they do it sometimes (Figure 10). 11 Always Teachers Parents Often 11% 6% 0% Sometimes Never 89% 34% 20% 59% 40% 60% 80% 100% Figure 10. How often teachers publish information related to their children/schoolchildren personal data (their photos, information on certain details of their lives) on the Internet. 1.2.3. Understanding threats of disclosure of personal data on the Internet Almost all children intervieweed (85%) have identified as the most possible threat the misappropriation of identity in order to make a purchase or perform, for example, cash transactions on behalf of another person. Furthermore, 58% of young people think that personal data such as photos can be used for advertising or can be placed in erotic websites. The following risk feared by 53% of the respondents is the use of personal data for commercial purposes. Other possible threats, identified respectively by 49% and 46% of the interviewed, are electronic harassment to intimidate another person or to cause tension and unsolicited advertising and commercial messages (SPAM). A small number of young people, only 8%, do not think that there are any threats, while 2% have identified menaces different from the ones listed (Figure 11). 63% of parents have identified “the electronic harassment to intimidate another person or to cause tension” as the most common threat. Besides, the following threats feared by the respective number of respondents are: misappropriation of identity in order to make a purchase or perform, for example, cash transactions on behalf of another person (59%); use of personal data for commercial purposes (59%); use of photos for advertising or erotic websites (56%); and reception of unsolicited advertising and commercial messages, mostly known as SPAM (53%). Finally, 9% of the respondents think that there is no menace at all (Figure 11). 12 Almost 70% of teachers interviewed as part of the survey have identified as the most common threats: misappropriation of identity in order to make a purchase or perform, for e.g., cash transactions on behalf of another person and reception of unsolicited advertising and commercial messages (SPAM). The majority (63%) also think that personal data could be used for commercial purposes. Furthermore, 56% of the respondents believe that photos could be used for advertising or could be placed in erotic websites. The following threat feared by 37% of the respondents is the electronic harassment to intimidate another person or to cause tension. Finally, only 4% think that there is no menace at all. Responses received from service providers to the question on possible threats associated with the personal data disclosure indicate that almost all of the interviewed (86%) have identified as the most possible threat the misappropriation of identity in order to make a purchase or perform, for example, cash transactions on behalf of another person. Furthermore, 64% of data controllers think that electronic harassment to intimidate another person or to cause tension is a quite common menace. The following risks feared by the respondents are, in order of importance, circulation of personal photos for advertising or erotic websites (57%); use of personal data for commercial purposes (50%) and reception of unsolicited advertising and commercial messages, mostly knows as SPAM (43%). None of the questioned have selected the response option “I don’t think there are any threats” (Figure 11). 13 Children Parents Teachers Service Providers Misappropriation of identity in order to make a purchase or perform, for ie, cash transactions on behalf of another person 86% 70% 59% 85% 50% Use of personal data for commercial purposes 63% 59% 53% 64% Electronic harassment to intimidate another person or to cause tension 37% 63% 49% 43% Unsolicited advertising and commercial messages (SPAM) 70% 53% 46% 57% 56% 56% 58% Photos, used for advertising or placed in erotic websites I don’t think there are any threats Others 0% 4% 9% 8% 0% 0% 0% 2% 0% 20% 40% 60% 80% 100% Figure 11. Opinion of children on possible threats associated with the personal data disclosure on the Internet. Parents are almost equally divided between 44% who haven’t discussed with their children the subjects of privacy, personal data and threats associated with the personal date disclosure on the Internet and 41% who have talked about personal data disclosure. There are also 12% of parents who said it has not been necessary since their children were already aware. Finally, only 3% of the respondents do not think that is important (Figure 12). 33% of teachers have discussed with their schoolchildren the subjects of privacy and threats of personal data disclosure on the Internet, while 26% never had. Furthermore, 26% of the teachers think that it is not their responsibility, 11% said it has not been necessary since the schoolchildren were already informed and just 4% of the questioned do not consider that it is an important matter (Figure 18). 14 Yes No I don't think it is important There was no need as they already knew about it It is not under my responsability Teachers 33% 26% 41% Parents 0% 20% 4% 11% 26% 44% 40% 60% 3% 80% 13% 100% Figure 12. Analysis of the answers of parents and teachers to the question “Have you ever talked on privacy, personal data and threats associated with the personal data disclosure on the Interne with the children/schoolchildren?” 66% of parents do not think that young people have enough knowledge on possible threats associated with the personal date disclosure on the Internet. Besides, only 9% of the parents interviewed believe that young people are quite informed. Finally, 25% do not know about young people’s knowledge of possible threats of personal data disclosure (Figure 13). 44% of teachers do not think that young people have enough knowledge on possible threats associated with the personal date disclosure on the Internet. Besides, 30% of the teachers believe that young people are quite informed. Finally, 26% of the respondents do not know young people’s knowledge of the possible threats of personal data disclosure (Figure 13). 15 Yes Teachers 30% Parents I don't know 44% 9% 0% No 26% 66% 20% 40% 25% 60% 80% 100% Figure 13. Analysis of parents’ and teachers’ opinion about children knowledge on possible threats associated with the personal date disclosure on the Internet. 1.2.4. Privacy violations on the Internet From the analysis of the data presented in the summarizing table (Figure 14), we can state that the majority of the respondents among children have never experienced directly big threats to their privacy. In fact, the most common case has been circulation of photos or videos on the Internet without previous consent. 16 Yes, more than once Yes, once No Child received an unwanted proposal by phone or e-mail This has happened to my friends 17% 15% 62% Child's identity was misappropriated 5%10% 75% False information about the child was 10% 9% circulated on the Internet 68% Having no consent child's photo or video clip 7% 9% was circulated on the Internet Having no consent child's name and surname, home address and etc. was circulated on the Internet 10% 13% 78% 20% 0% 5% 18% 20% 6% 52% 40% 60% 10% 80% 100% Figure 14. How often did children experience indicated cases. From the analysis of the data presented, we can state that the majority of parents were not so sure if any of the listed cases (Figure 15) had ever happened to their son/daughter. 17 Yes, more than once Yes, once Child received an unwanted proposal by phone or e-mail No 13% 3% 28% Child's identity was misappropriated 0% 3% 34% False information about the child was 3% 3% circulated on the Internet 28% Having no consent child's photo or video clip 3% 3% was circulated on the Internet 56% 62% 66% 41% Having no consent child's name and surname, home address and etc. was 9%3% circulated on the Internet 0% I don't klnow 53% 34% 20% 53% 40% 60% 80% 100% Figure 15. Analysis of the answers of parents to the question „Has your son/daughter ever faced these cases?” From the analysis of the data presented below (Figure 16), we can state that the majority of teachers do not know any direct case of big threat to their schoolchildren’s privacy. In fact, the most common case has been circulation on the Internet of false information about one of their schoolchildren. 18 Yes, more than once Yes, once No This has happened to my son/daughter Child received an unwanted proposal by 7% phone or e-mail 93% Child's identity was misappropriated 7% 93% False information about the child was circulated on the Internet 15% Having no consent child's photo or video clip was circulated on the Internet 33% 19% Having no consent child's name and surname, home address and etc. was circulated on the Internet 19% 30% 0% 52% 20% 63% 22% 40% 37% 60% 11% 80% 100% Figure 16. Analysis of the answers of teachers to the question „Are you aware of such cases?” 1.3. Protection of Personal Data 1.3.1. Measures to ensure better protection of children‘s personal data on the Internet A high number of children (65%) have identified diffusion of a “Safe Internet” idea as the best measure to protect their own data. This strategy is followed in effectiveness by formal and informal education of children, for example through awareness-raising campaigns (54%); an enhanced personal responsibility of the user (52%); a greater responsibility of website administrators (50%); implementation of better laws (36%); use of programs limiting browsing on the Internet according to the keywords (27%) and a stricter parental control over their children (16%), as seen on Figure 17. The same question (Which of the measures could ensure better protection of childrens' personal data on the Internet?) was given to the parents. 84% of the respondents have identified the formal and informal education of children as the best measure to protect young people’s personal data. This strategy is followed in effectiveness by: a greater responsibility of website administrators (53%); implementation of better laws (53%); use of programs limiting browsing on the Internet according to the keywords (41%); propagation of a 19 “Safe Internet” idea (41%); an enhanced personal responsibility of the user (19%) and finally a stricter parental control over their children (9%) (Figure 17). As it comes to teachers, they identified formal and informal education of children (59%) and propagation of a “Safe Internet” idea (56%), as the best measures to protect their schoolchildren data. These strategies are followed in effectiveness by greater responsibility of website administrators (48% of the questioned); implementation of better laws (44%); a stricter parental control over their children (41%); use of programs limiting browsing on the Internet according to the keywords (37%). Finally, 15% of the interviewed believe that the better way of protection is to enhance personal responsibility of the user (Figure 17). 64% of serivice providers believe that formal and informal education of children, for example through awareness-raising campaigns, as well as the propagation of a ‘Safe Internet’ idea, are the measures that could better contribute to young people data protection. These strategies are followed in effectiveness by greater responsibility of website administrators (50%); implementation of better laws (43%); enhanced personal responsibility of the user (36%); use of programs limiting browsing on the Internet according to the keywords (21%) and stricter parental control over children (21%) (Figure 17). 20 Children Parents Teachers Service Providers 64% 59% Formal and informal education of children, such as awareness-raising campaigns 84% 54% 36% 15% 19% Personal responsibility of the user 52% 21% Stricter parental control over children 41% 9% 16% 50% 48% 53% 50% Greater responsibility of website administrators 43% 44% Better laws 53% 36% 21% Programs limiting browsing on the Internet according to the keywords 37% 41% 27% 64% Propagation of ‘Safe Internet’ idea 41% 56% 65% 0% 20% 40% 60% 80% 100% Figure 17. Which measures could ensure better protection of children's personal data on the Internet? All service providers that participated in the survey have identified educational measures as the most insufficient ones. Besides, 29% have selected legal measures as second response option. High percentages of interviewed have identified lacks in respectively organizational (57%) and self-regulation measures (43%). Finally, only 14% of the respondents have stressed the need to improve technical measures (Figure 30). 21 Educational 100% 86% Legal Organizational 57% 43% Self-regulation Technical 14% 0% 20% 40% 60% 80% 100% 120% Figure 18. Measures which according to service providers should be improved in order to guarantee comprehensive personal data protection on the Internet. 1.3.2. Privacy policy Less than half of the questioned children (34%) always familiarize themselves with website’s privacy policy. 27% do it some times, while 16% familiarize often. There is still quite high percentage (18%) who never read privacy policies. Finally, 5% of the respondants think that it is not necessary (Figure 19). 22 I don't think it is necessary 5% Never 18% Always 34% Sometimes 27% Often 16% Figure 19. Analysis of the answers of children to the question „Do you, when publishing information related to your own or your friend’s personal data on the Internet, familiarize with the website’s privacy policy (how and what for personal data may be used, what are your rights, responsibility and etc.) or set privacy settings?” The majority of parents (almost 60%) never familiarize themselves with website’s privacy policy while, on the other side, only 6% do it always. The remaining part of the questioned are divided into 22% who familiarize themselves sometimes, 10% who do it often and 3% who do not think it is necessary (Figure 20). As it comes to teachers, the majority of the questioned (85%) never familiarize with the website’s privacy policy. On the other side, 15% does it always (Figure 20). 23 Always Teachers Parents Often Sometimes Never 15% 6% 0% I don't think it is necessary 85% 9% 22% 10% 20% 30% 59% 40% 50% 60% 3% 70% 80% 90% 100% Figure 20. Analysis of the answers of parents and teachers to the question „Do you, when publishing information related to your daughter’s/sun’s/schoolchildren’s personal data on the Internet, familiarize with the website’s privacy policy (how and what for personal data may be used, what are your rights, responsibility and etc.) or set privacy settings?” 58% of the data controllers interviewed have declared that they have a privacy policy. The remaining 42% do not have it but plan to have in the future (Figure 21). Yes, I have it 57% No, but I plan to have it in the future No, I don't have it 42% 0% I don't think it is 0% necessary 0% 20% 40% 60% Figure 21. Answers of service providers to the question “As a controller of an Internet site, do you have a privacy policy?”) 24 1.3.3. Implementation of rights of data subjects Survey participants were asked who in their opinion should familiarize children with the possible infringements of personal data on the Internet and remedies to avoid them (Figure 22). According to children‘s responses to the question, this task should mainly concern parents (option selected by 73%), followed by teachers (51%), the media (42%), the manager of the web site (38%), the State Data Protection Inspectorate (37%), friends (16%), and NGOs (9%). It is interesting that 34% think that young people should have interest themselves. 75% of parents agree that this task mainly concerns teachers. 59% have chosen media as their second response option. Furthermore, responsibility to raise aware of young people should also interest parents (option selected by 56%), managers of websites (31%), NGOs (25%), the State Data Protection Inspectorate (25%) and friends (16%). Finally 13% of parents have stressed that young people should get interested themselves. According to teachers, the task to familiarize children with with the possible infringements of personal data on the Internet mainly concerns parents (option selected by 70%), followed by the State Data Protection Inspectorate (63%), a manager of the website (59%), media (52%) and finally teachers (44%). 11% believe that young people should have interest themselves. No one has identified either friends or NGOs as responsible to raise awareness among their peers or young people. According to service providers’ responses, this task mainly concerns teachers (option selected by 86% of the respondents), followed by parents (71%) and young people themselves (57%). The same percentage (29%) of respondents identified media and the State data protection Inspectorate as responsible to raise awareness of young people. Also friends and web site managers share the same percentage of responsibility, according to 14% of the respondents. No one has selected NGOs as possible awareness subjects. 25 Children Parents Teachers Service Providers Parents 71% 70% 56% 73% 86% 44% Teachers 75% 51% 29% 52% The media 42% 29% State Data Protection Inspectorate 63% 25% 37% 14% Manager of the website 31% Children should have interest themselves 59% 38% 57% 11% 13% 34% 14% Friends 0% Non-governmental organizations 59% 16% 16% 0% 0% 25% 9% 0% 0% Others 0% 1% 0% 10% 20% 30% 40% 50% 60% 70% 80% 90% Figure 22. Analysis of the answers to the question „Who do you think should familiarize children with the possible infringements of personal data on the Internet and remedies to avoid them?” 31% of the parents interviewed would address firstly to the State Data Protection Inspectorate. 28% would contact the Court; 19% would report to the Children’s Rights Ombudsman Institution; 16% would refer to the manager of the website responsible of the data violation. Finally, 6% of the respondents would address to subjects different from the ones listed in the survey response options (Figure 23). 41% of the teachers interviewed would address firstly to the State Data Protection Inspectorate and 26% to the manager of the website responsible of the data violation. 7% would contact a Court or the Children’s Rights Ombudsman Institution. Finally, 19% of the teachers interwieved would not contact anybody, since they think that it is not their responsibility (Figure 23). 26 Parents Teachers 41% State Data Protection Inspectorate 31% 26% Manager of the website 16% 7% Court 28% 7% Children’s Rights Ombudsman Institution Other institution I would not contact nobody, because it is not upon my responsibility 19% 0% 6% 19% 0% 0% 10% 20% 30% 40% 50% Figure 23. Analysis of parents’ and teachers’ answers to the question “Whom would you firstly contact yourself (or recommend for a schoolchild to contact) in case his/her right to the protection of personal data was breached?” Web users refer to the data controllers interviewed mostly to ask them to provide information on which personal data are collected and from which sources are processed (71% of the respondents). With the same frequency, web users address to data controllers willing to withdraw consent to process their personal data (71%). 57% of the respondents are mostly asked to explain the purposes for which personal data are collected and to erase users’ personal data or terminate any operations of processing upon personal data. Finally, 36% of the respondents are frequently asked to correct inaccurate, incomplete or incorrect personal data, while only 7% have never received questions by web users on use of their data (Figure 24). 27 Willing to withdraw the consent to process his personal data 71% To provide information from which sources and which personal data are collected and processed 71% To erase his personal data or terminate any operations of processing upon personal data 57% To explain the purposes for which his personal data are collected 57% To correct inaccurate, incomplete or incorrect personal data 36% No data subject referred to me yet 7% 0% 20% 40% 60% 80% Figure 24. Data subjects’ requests to service providers 1.4. Conclusions 1.4.1. Internet Usage 1.4.1.1. Children activities on the Internet and Usage of social networks As regards activities performed by children on the Internet the most popular ones with daily frequency are: collection of information (39%), load (circulation) of information about themselves or their friends (39%) and download of music and films (37%). Of these activities, the load and circulation of personal information on the Internet is the only one at risk of infringements of the users’ and their friends’ privacy. In Italy, chatting with unknown person is not a prime danger, since 43% of children involved in the survey have declared that they never do it, while only 16% do it every day. The survey showed a large and widespread use of social networks among children. The most popular one is Facebook as 66% respondents use it every day. If we refer to the most common use of Facebook (sharing of photos, personal information, habits, activities and events to which the user will assist), we can connect the children’s use of Facebook to the above mentioned load/circulation of information. Thus, a 28 potential risk is the misappropriation of children’s personal data and their use for illegal purposes which could go from the infringements of their rights to more serious crimes. Responses by parents to the question of how often their children perform such activities reveal that majority of the parents have no clues about it. In this regard, it is representative that many of the interviewed parents do not know if their children chat with unknown people (41%) or load information about themselves and their friends (37%). The only activity that 31% of the parents recognize that their children perform with high frequency (several times a week) is the collection of information on the Internet. Furthermore, adults involved in the survey (both parents and teachers) do not share with children the knowledge on how to use Internet to socialize with other people: this is an important intergenerational gap. As regards the adults’ use of social networks, 59% of parents use Facebook and 37% are not registered in any social network; 67% of teachers are not registered in any and 30% of teachers use Facebook. Based on these data, it is important to underline the need for a greater involvement of adults in children’s usage of the Internet, both as it comes to interest in the activities children perform (especially in the case of parents) and awareness of the potential risks linked to such activities (to be raised by parents and teachers). Children should be deeply and clearly informed on the possible consequences of their incorrect or unlimited use of Internet (with respect to publication of personal data) and should be given behavioural paths to protect themselves and their friends. The main limitation is that adults close to children may not be totally aware of the possible risks their children incur, due to their limited use of Internet as to the generational gap regarding the activities performed on Internet. For these reasons, we believe that involvement of public and private institutions and NGOs operating in the field of protection of minors and consumers is extremely necessary. These stakeholders should address their awareness activities towards children directly or indirectly (through parents and teachers). Even though, parents should adopt the habit of talking with their children appealing to a reciprocal dialogue on these subjects; while, on the other side, teachers should complement the parents’ effort by dealing with these problematic issues within the educational context. 1.4.2. Personal Data 1.4.2.1. Understanding personal data The answers to the question “What, in your opinion, is personal data?” disclosed a great difference in the respondents’ opinions (children, parents and teachers). 100% of answers have been assigned only to name and surname and exclusively by parents’ group; 95% of the children marked this option and only 23% of the teachers identified this information as personal data. If we consider that all the answer options provided by 29 the survey were personal data, no identification from the interviewed of some of them is significant and brings to light the need to raise awareness of children, parents and teachers on the definition of personal data. The most striking fact which can support our argument is that school name has been identified as personal data only by 12% of the children; even more shocking is that none of teachers have marked this option! 1.4.2.2. Publication of personal data on the Internet In correlation to what was underlined in the previous section, we have to indicate that the children who took part in the survey are not likely to publish their personal data on the Internet. Even though, a small percentage of those who do, provide information such as school name (38%), membership to extracurricular activity groups (26%) and name and surname (24%). These are obviously key information which could enable a evil-minded person to misappropriate the child identity or to know exactly where to find him/her and when. Other alarming data in this respect comes from the question if they provide correct personal data when registering in various sites on the Internet: 52% of the children answered “sometimes”, while only 14% never do and 11% do not register when asked to provide this information. Furthermore, the majority of them provide real information about themselves while communicating in social networks or dating sites (39% do it sometimes and 19% do it often). Finally, it is important to note that 15% of the children don’t think that it is necessary to get their friends’ consent before publishing their personal data (photos, information about certain details of their lives) on the Internet while, on the other side, 35% always ask for it. If children usually publish personal data about themselves and their friends, adults do not share the same habit. 59% of parents and 89% of teachers never circulate on the Internet information about their children/students. Even though, this could be simply due to the fact that adults are not likely to use social networks. 1.4.2.3. Understanding threats of disclosure of personal data on the Internet Even if children, parents, teachers and service providers have ranged differently the listed possible threats associated with the personal data disclosure on the Internet, almost all options have scored high percentages. In particular, children (85%), teachers (70%) and service providers (86%) agreed that the most possible risk is the misappropriation of identity in order to make a purchase or perform, for i.e., cash transactions on behalf of another person; while the prime threat identified by parents (63%) is the electronic harassment to intimidate another person or to cause tension. Though a general awareness has been detected, 30 more actions must be released to inform all target groups on other possible menaces not included in the list, and especially to advert the ones who have not marked any threat (8% of children, 9% of parents and 4% of teachers). It is significant to note that none of the service providers, who are the ones that mostly handle this issue, has selected the answer “I don’t think there are any threats”. The scene is more worrying if we refer to the involvement of parents and teachers in the familiarization of children with privacy policies and potential threats. The majority of parents (59%) and of teachers (67%) have not talked with children about these topics, regardless the reason why (someone thinks it is not important, others that it is not their responsibility or that children are already aware). It is even worse if we take into account that this lack of dialogue is present despite many parents (66%) and teachers (44%), do not think that children have enough knowledge on possible threats associated with the personal data disclosure on the Internet. As already stressed, the involvement of adults in warning children is urgent and necessary. 1.4.2.4. Privacy violations on the Internet When referring to direct or close experiences of violations (such as circulation of photos and personal data without consent or false information, misappropriation of identity, reception of unwanted proposals by unknown people), the majority of the children interviewed have never faced big threats to their privacy. In fact, the most common case has been the circulation of photos or video clip on the Internet without previous consent (20%). Neither parents nor teachers’ have showed sufficient awareness on these violations happening to their children or students and this should be object of work to get an improvement in their participation. 1.4.3. Protection of Personal Data 1.4.3.1. Measures to ensure better protection of children’s personal data on the Internet Mostly all the measures, listed in the survey, to ensure better protection of children’s personal data on the Internet have been marked as necessary by each target group, even if with a different scale of priority. The ones that have been identified as the most effective to implement are: diffusion of a “Safe Internet” idea – option selected by 65% of the children themselves and 64% of service providers) and formal and informal education of children (by 84% of parents and 59% of teachers). The need of awareness raising campaigns has been stressed too, together with enhanced responsibility of both the website administrators and the users. Implementation of better laws would surely help to make the website administrators to assume their responsibility. On the other hand, a stricter parental control would overburden children without getting results and this is why it should be replaced by more interactive educational tools. In this regard, the service 31 providers have remarked that educational (33%) and legal (29%) measures are the most insufficient ones. This accords with the perception of parents and teachers. 1.4.3.2. Privacy policy If we consider that 42% of service providers interviewed do not have a privacy policy, we can understand why users (both children and adults) are not familiarized with it. Only 16% of children get informed on the website’s privacy policy or set privacy settings when publishing information about themselves or their friends. Even worse, 60% of parents and 85% of teachers never do while publishing personal data of their children/students! The need of more commitment from service providers is evident as the legal obligation to have a privacy policy. On the other hand, parents need to adopt the habit to control how and what personal data may be used, what are user rights, responsibilities and so on, in order to transfer this knowledge and positive attitude to their children/students. 1.4.3.3. Implementation of rights of data subjects When asked to indicate who should familiarize children with the possible infringements of personal data on the Internet and remedies to avoid them, all the target groups have given the prime responsibility to the people naturally charged to educate children: parents (73% of the children and 70% of the teachers) and teachers (75% of the parents and 86% of the service providers). If we cannot blame children for their choice, we should at least notice that this crossed responsibility teachers / parents is a leitmotif that comes out in almost every discussion regarding educational issues. A surprising absence is that of the NGOs which are probably not identified as stakeholders in this field; this means that they should get involved with more emphasis in the promotion of the respect for children’s privacy on the Internet, may be organizing the awareness and educational activities requested by the target group interviewed and therefore release the parents’ and teachers’ burden. If we move to the responsibility of protection once the children’s right to personal data has been breached, parents (31%) and teachers (41%) agrees pointing to the State Data Protection Inspectorate and leaving in a second place the website’s manager. This selection reflects their identification with the legal process of accusation. In the answers of teachers we can detect also a low interest in the protection of their students’ rights, since 19% declared that this task is not upon their responsibility. The teachers’ involvement should be strongly motivated, based on the assumption that they are an important referral for their students. 32 Service providers have also registered direct requests from users regarding the management of their personal data. According to the respondents, users show concern mostly on which personal data are collected and from which sources are processed (71%), as for which purposes (57%). Other users’ complaint are linked to the willing to withdraw the consent to process their personal data (71%) and to erase their personal data or terminate any operations of processing upon them (57%). 33 2. The Analysis of Target Group Needs in Lithuania 2.1. Internet Usage According to answers of children, the most popular activities carried out by them on the Internet are downloading music, films and etc. (39% do it every day, 37% - several times a week), and collecting information (22% do it every day, 45% - several times a week). Taking into account activities carried on the Internet that could lead to the most serious infringements of the privacy, safety or other rights of children, the results of the survey showed that 20% of children load (circulate) information about themselves or their friends, 19% chat with unknown persons several times a week, but there is also clear trend that 28% and 40% respectively don’t do this at all (Figure 1). Every day Several times a week Download music, films and etc. Once a month Several times a year 39% Collect information on the Internet 37% 22% Carry out other activities 17% Chatting with the unknown person 10% Load information about himself/herself or his/her friends 8% 0% 12% 4% 8% 45% 11% 19% 20% 20% 21% 8% 4% 16% 27% 40% Don't do this at all 5% 6% 60% 15% 40% 16% 60% 28% 80% 100% Figure 1. How often do children carry out these activities on the Internet. The survey showed that younger children (13-14 years old) are less minded to load (circulate) information about themselves or their friends on the Internet - 38% don’t do this at all, whilst among elder children only 21% and 19% don’t do this at all (Figure 2). 34 Every day Several times a week 17-18 years old 11% 15-16 years old 8% 13-14 years old 7% 0% Once a month 21% 31% 22% 18% Several times a year 19% 31% 22% 20% Don't do this at all 19% 17% 21% 15% 40% 38% 60% 80% 100% Figure 2. How often do children load (circulate) information about himself/herself or his/ her friends on the Internet. As regards chatting on the Internet with unknown person, the situation is very similar – 50% of children aged 13-14 years said that they don’t do this at all, whilst among elder children this number is 35% and 30% by respective age groups (Figure 3). Every day Several times a week 17-18 years old 13% 15-16 years old 9% 13-14 years old 9% 0% Once a month 23% 18% 23% 15% 20% 17% 14% Several times a year 17% 30% 16% 12% 40% Don't do this at all 35% 50% 60% 80% 100% Figure 3. How often do children chat with the unknown person on the Internet. As regards awareness of parents about the activities carried out on the Internet by their children, 58% of respondents said that most often – every day - their children collect information on the Internet, 47% said that several times a week their children download music, films and etc. With respect to 35 activities that could cause the most significant danger to children’s right to privacy and other rights, 30% of parents said that children load (circulate) information about themselves or their friends, 22% – that they chat with unknown persons several times a week. 22% and 31% of parents respectively don’t know whether their children carry out these activities or not (Figure 4). In comparison, two times as few (22%) children said that they collect information on the Internet every day (Figure 1). As regards other activities, there is not such considerable difference between answers of parents and children. Every day Several times a week Once a month Several times a year Don't do this at all Don't know 1% Collect information on the Internet 58% Download music, films and etc. 32% 23% Chatting with the unknown person 47% 18% Load information about himself/herself or his/her friends 22% 13% 0% 5% 7% 30% 20% 7% 4%5% 13% 16% 31% 8% 19% 40% 4% 4% 60% 7% 22% 80% 100% Figure 4. Awareness of parents about the activities carried out on the Internet by their children (analysis of the answers to the question „How often do your children carry out these activities on the Internet”). The survey showed that 53% of respondents among children daily use international social network Facebook, 21% use Lithuanian website One.lt or other unspecified social networks and dating sites (Figure 5). Other specified social networks and dating sites, such as Frype.lt, Klase.lt, Twitter and etc., are quite less popular – only 2-3% of respondents said that they use these sites. 36 Facebook 53% One.lt 21% Draugas.lt 4% Pazintys.lt 3% MySpace 3% Twitter 3% Frype.lt 2% Klase.lt 2% LinkedIn 2% Others 21% 0% 10% 20% 30% 40% 50% 60% Figure 5. Analysis of the answers of children every day using specified social networks and dating sites. According to Figure 6, the most popular websites among parents and teachers are Facebook and Klase.lt – more than half of respondents are registered users of these websites. 32% of teachers and 28% of parents also use One.lt, 21% and 14% respectively – Draugas.lt. 20% of parents and 24% of teachers do not use websites of such type at all. In conclusion, the majority of adults use social networks or dating sites, so they should be quite aware about the peculiarities of such types of websites. 37 Parents Teachers 65% Klase.lt 53% 53% Facebook 58% 32% One.lt 28% Draugas.lt 21% 14% 9% Supermama.lt 15% 12% Frype.lt 6% 3% 4% LinkedIn MySpace 6% 1% Pazintys.lt 3% 3% Twitter 3% 2% Other 18% 4% Don't register 20% 0% 10% 20% 24% 30% 40% 50% 60% 70% Figure 6. Popularity of social networks and dating sites among parents and teachers (analysis of the answers to the question “Which of these social networks/dating sites are you a registered user?”) 2.2. Personal Data 2.2.1. Understanding personal data The majority of respondents among children (87%) considered that name and surname, is the most common personal data, followed by personal code (81%), home address (67%) and mobile phone number (51%). The vast majority of the interviewed teachers (97%) considered personal code and name, surname as the most common personal data. 91% said that the home address and mobile phone number is personal data. As regards answers of parents, 97% of them said that personal code is personal data, 87% indicated name and surname, 82% - home address, 73% - mobile phone number, 71% - photo and 63% - e-mail address. 38 The minority of respondents treats school name, information related to person’s religious beliefs, father’s name as personal data. The most different opinions of the children and of the adults were on the information related to health – this kind of information was indicated as personal data by 22% of children and by 61% and 74% respectively of parents and teachers. Quite big difference of views was concerning father’s name (17% of children, 45% of parents, 38% of teachers), photo (38% of children, 62% of parents, 71% of teachers), e-mail address (35% of children, 63% of parents, 65% of teachers), mobile phone number (51% of children, 73% of parents, 91% of teachers) (Figure 7). Children Parents Teachers Personal code 97% 97% 81% 97% Name, surname 87% 87% 82% Home address 91% 67% Mobile phone number 73% 91% 51% 62% Photo 71% 38% 65% 63% E-mail address 35% 61% Health data 74% 22% 38% Father's name 45% 17% 32% Religious beliefs 40% 17% 24% School name 37% 20% 0% 20% 40% 60% 80% 100% 120% Figure 7. Analysis of the children, parents and teachers answers to the question “What, in your opinion, is personal data?” Comparing children’s answers according to age groups (Figure 8), the same part (87%) of respondents of every age group was of the opinion that personal data is name and surname. 39 The most different opinions were concerning information related to health – 18% among children aged 13-16 years and twice more - 39% - among children aged 17-18 years, while the most similar responses were on school name (the difference between answers of different age groups is 1 and 2 percent). The common trend is that elder children (aged 17-18 years) have better understanding of personal data – as regards all listed categories of personal data, positive answers of this age group exceed these of other groups of age. 13-14 years old 15-16 years old 17-18 years old 87% 87% 87% Name, surname Personal code 76% 66% 64% Home address Mobile phone number 49% 50% 36% 36% Photo E-mail address 31% 34% 20% 18% Health data 83% 89% 73% 59% 46% 46% 39% 21% 19% 20% School name Father's name 15% 16% Religious beliefs 15% 16% 0% 20% 23% 23% 40% 60% 80% 100% Figure 8. Analysis of answers of the children of different age groups to the question “What, in your opinion, is personal data?” 2.2.2. Publication of personal data on the Internet Children were asked to identify the categories of personal data which they provide on Internet websites. The results showed (Figure 9) that the majority of children (more than 70%) never share their personal identification number, home address and information related to their religion and illnesses. On the other 40 hand, the most revealed personal data appeared to be name and surname (92%) and email address (87%). Extracurricular activities, school name and telephone number are shared by almost half of the children. Personal identification number 91% Illnesses 91% Religion 82% Home address 73% Extracurricular activities 60% School name 42% 40% Telephone number E-mail 13% 8% Name, surname 0% 20% 40% 60% 80% 100% Figure 9. Information which is not shared (kept secret) by the children on Internet websites The survey indicated that the vast majority of 13-18 years old children provide correct personal data when they register on various Internet websites. Only 11% of children indicated that they never do that and 4% admitted that they do not register on Internet websites if they are asked to enter personal information (Figure 10). 41 Never 11% Sometimes 40% If I am asked to provide my personal data I do not register 4% Always 17% Often 28% Figure 10. Analysis of children answers to the question “Do you provide correct personal data - name, surname, date of birth, etc. - when you register on various Internet websites?” The survey showed that more than half of the children (57%) often or sometimes invent information or give false data to people with whom they communicate online. In comparison, 26% of the children provide correct information about themselves and 17% of the children never say truth or provide correct data on the Internet (Figure 11). Never 17% Always 26% Sometimes 28% Often 29% Figure 11. Analysis of children answers to the question “When communicating on the Internet (for ex. in social networks or dating sites) do you provide correct information about yourself for those with whom you socialise?” 42 36% of the children stated that they never publish personal data of their friends on the Internet. From those who publish the personal data of their friends and other people they know, 23% always receive a consent from a person concerned (data subject), while 11% do not think that it is necessary (Figure 12). I do not publish data of my friends 36% Always 23% I do not think it is necessary 11% Sometimes 13% Often 17% Figure 12. Analysis of children answers to the question “Do you receive a consent from your friends before publishing their personal data (photos, information about certain details of their lives) on the Internet”? The survey indicated that parents and teachers are not willing to publish information related to children‘s or schoolchildren‘s personal data (their photos, information on certain details of their lives) on the Internet – 79% of parents and 68% of teachers never do that, 26% of teachers do it sometimes. On the other hand, 20% of parents often publish personal data of children‘s on the Internet (Figure 13). 43 Always Teachers 6% Often Sometimes 26% Never 68% 1% Parents 20% 0% 79% 20% 40% 60% 80% 100% Figure 13. How often parents and teachers publish information related to their children/schoolchildren personal data (their photos, information on certain details of their lives) on the Internet. 2.2.3. Understanding threats of disclosure of personal data on the Internet According to the opinion of respondents on possible threats associated with the personal data disclosure on the Internet, almost all options were indicated by more than half of respondents. With regard to the most possible threat associated with the personal data disclosure on the Internet, 72% of children, 79% of parents, 85% of teachers indicated misappropriation of identity in order to make a purchase or perform, for example, cash transactions on behalf of another person, and 78% of service providers – unsolicited advertising for commercial purposes (SPAM). 10% of children and 11% of service providers don’t think there are any threats (Figure 14). 44 Children Parents Teachers Service providers 56% Misappropriation of identity 72% Use of personal data for commercial purposes 56% 60% 52% 56% 53% 55% Electronic harassment Unsolicited advertising and commercial messages (SPAM) 53% 51% 45% 22% 85% 79% 67% 64% 78% 50% 53% 54% Photos, used for advertising 11% Don't think there are any threats 1% 3% 1% 4% Other 0% 10% 11% 20% 40% 60% 80% 100% Figure 14. Opinion of respondents on possible threats associated with the personal data disclosure on the Internet. Answering to the question “Have you ever talked about privacy, personal data and threats associated with the personal data disclosure on the Internet with the children/schoolchildren?” 91% of teachers and onethird less - 63% of parents said “yes” (taking into account data of Figure 15, teachers fulfill their duties quite well, whilst it could not be said about parents), 22% of parents and only 3% of teachers said “no”. Anybody of them didn’t think it’s not important (Figure 15). 45 Yes No There was no need as they already knew about it It's not upon my responsibility 91% Teachers 3% 6% 1% Parents 63% 0% 20% 22% 40% 60% 14% 80% 100% Figure 15. Analysis of the answers of parents and teachers to the question “Have you ever talked on privacy, personal data and threats associated with the personal data disclosure on the Interne with the children/schoolchildren?” Analysis of parents’ and teachers’ answers to the question “Do you think children have enough knowledge on possible threats associated with the personal data disclosure on the Internet” showed that more than half of respondents – 50% of parents and even 68% of teachers think that children are not quite aware about such threats. Only 26% of teachers and 37% of parents said that knowledge is enough (Figure 16). Yes Teachers 26% Parents Don't know 68% 37% 0% No 20% 6% 50% 40% 60% 13% 80% 100% Figure 16. Analysis of parents’ and teachers’ opinion about children knowledge on possible threats associated with the personal date disclosure on the Internet. 2.2.4. Privacy violations on the Internet As regards facing violations of using personal data on the Internet, the majority of children said that they have never experienced indicated cases related to privacy violations on the Internet. The most experienced case indicated by 19% of children was unwanted proposal received by phone or e-mail. 10% of respondents said that more than once his/her photo was circulated on the Internet without consent, 5% – that 46 more than once experienced circulation of his/her name, surname, home address and other personal data on the Internet without his/her consent, and misappropriation of his/her identity (Figure 17). Yes, more than once Yes, once Child received an unwanted proposal by phone or e-mail No 19% Don't know 13% 57% Having no consent child's photo or video clip 10% 13% was circulated on the Internet 11% 60% 17% False information about the child was 6%10% circulated on the Internet 64% 20% Child's identity was misappropriated 5% 13% 62% 20% Having no consent child's name and surname, home address and etc. was 5%8% circulated on the Internet 0% 67% 20% 40% 20% 60% 80% 100% Figure 17. How often did children experience indicated cases. As regards answers of parents, the majority of parents were not so sure if any of the listed cases had ever happened to their son/daughter. Evaluating answers “no” and “don’t know” it seems that parents are quite sure that children’s photo or video clip wasn’t ever circulated on the Internet without consent – 80% said “no” and only 13% said that don’t know about such cases. Similar situation is with misappropriation of identity – answers were 79% “no” and 16% “don’t know”. According to parents’ opinion, most experienced cases are unwanted proposals by phone or e-mail – 12% said that it has happened more than once (Figure 18). 47 Yes, more than once Yes, once Child received an unwanted proposal by phone or e-mail No 12% 9% Don't know 48% 31% 4% Having no consent child's photo or video clip 3% was circulated on the Internet 80% 13% 5% False information about the child was 2% circulated on the Internet 72% 21% 4% Child's identity was misappropriated 1% 79% 16% 3% Having no consent child's name and surname, home address and etc. was circulated on the 1% Internet 0% 71% 20% 40% 25% 60% 80% 100% Figure 18. Analysis of the answers of parents to the question „Has your son/daughter ever faced these cases?” In respect to the answers of teachers, the majority of them indicated that they are not aware about any of indicated cases (except circulation of schoolchild photo or video clip on the Internet – 42% said that such cases are not known). 29% of teachers said that one or more than one case is known when schoolchild’s photo or video clip was circulated on the Internet without his/her consent. 24% of teachers also knew more than one case about unwanted proposals received by schoolchild and 15% - about circulation on the Internet of schoolchild’s name, surname and other personal data without his/her consent (Figure 19). 48 Yes, more than one case is known Yes, one case is known Having no consent schoolchild's photo or video clip was circulated on the Internet 29% Schoolchild received an unwanted proposal by phone or e-mail 24% Having no consent schoolchild's name and surname, home address and etc. was circulated on the Internet 29% 42% 9% 67% 79% 15% 6% False information about the schoolchild was 6% 9% circulated on the Internet 85% 97% Schoolchild's identity was misappropriated 3% 0% No cases are known 20% 40% 60% 80% 100% Figure 19. Analysis of the answers of teachers to the question „Are you aware of such cases?” 2.3. Protection of Personal Data 2.3.1. Measures to ensure better protection of children‘s personal data on the Internet The most important data protection measure for parents (73%) and service providers (100%) seems to be formal and informal education of children, for teachers (59%) – stricter parental control over children, for children (56%) – propagation of “Safe Internet” idea (this measure is also quite important for service providers (67%), teachers (47%), parents (39%)). The measure of least significance to children is parental control over them (17%), to parents, teachers and service providers – better laws (12%, 15% and 0% respectively). The greater responsibility of website administrators is important for 52% of parents, 43% of children, 32% of teachers and only for 11% of service providers. 45% of children, 41% of teachers, 33% of service providers and 28% of parents mentioned personal responsibility of the user (Figure 20). 49 Children Parents Teachers Service providers 100% 41% Education of children 73% 38% Propagation of "Safe Internet" idea 39% 56% 44% Stricter parental control over children 33% Personal responsibility of the user 28% 22% 11% 45% 32% 43% 52% 22% 24% 21% 29% Programs blocking websites according to the keywords 0% Better laws Other 41% 41% 39% 38% Programs limiting browsing on the Internet Greater responsibility of website administrators 59% 33% 17% 67% 47% 15% 12% 31% 0% 0% 4% 2% 0% 20% 40% 60% 80% 100% Figure 20. Which of the measures could ensure better protection of children’s personal data on the Internet. All service providers which have participated in the survey place a great emphasis on education as a tool which may best contribute to comprehensive personal data protection on the Internet. All of the respondents think that educational tools should be improved. The majority of service providers also think that education, self-regulation needs to be enhanced further. According to the opinion of half of all service providers, legislative and organizational personal data protection measures are not sufficient and should be enhanced (Figure 21). 50 Educational 100% Self-regulation 78% Legal 56% Organisational 44% Technical 22% Other 0% 0% 20% 40% 60% 80% 100% 120% Figure 21. Measures which according to service providers should be improved in order to guarantee comprehensive personal data protection on the Internet 2.3.2. Privacy policy On the basis of the survey, it should be noted that service providers are concerned about personal data protection of their website visitors: all service providers participating in the survey, except one, have the privacy policy for their websites (social networks, chats, dating sites, entertainment portals). The one which does not have it, plans to introduce it in the future (Figure 22). Yes I have the privacy policy 89% I do not have the privacy policy but I plan to have it in the future 11% I do not think it is necessary 0% No, I do not have the privacy policy 0% 0% 20% 40% 60% 80% 100% Figure 22. Answers of service providers to the question “As a controller of an Internet site, do you have a privacy policy?”) 51 According to the results of the survey, 24% of children always familiarize themselves with the website’s privacy policy (how and what for personal data may be used, what are your rights, responsibilities and etc.) or set privacy settings, 20% of them often do this, 26% - sometimes. 17% never do that. As regards children’s opinion on necessity to familiarize themselves with the website’s privacy policy or to set privacy settings, 13% don’t think it’s necessary (Figure 23). Don't think it's necessary 13% Always 24% Never 17% Sometimes 26% Often 20% Figure 23. Analysis of the answers of children to the question „Do you, when publishing information related to your own or your friend’s personal data on the Internet, familiarize with the website’s privacy policy (how and what for personal data may be used, what are your rights, responsibility and etc.) or set privacy settings?” In comparison, almost half of respondents among parents and teachers (49% and 47% respectively), i.e. twice more than children, always familiarize themselves with privacy policy or set privacy settings, 9% of parents and 15% of teachers do this often, 11% never do that. 17% of teachers (4% more than children) don’t think it’s necessary, whilst among parents this figure is almost twice as little – only 11% of them think that it is not necessary (Figure 24). 52 Always Teachers Often Sometimes 47% Parents 20% Don't think it's necessary 15% 49% 0% Never 12% 9% 40% 9% 18% 60% 13% 80% 17% 11% 100% Figure 24. Analysis of the answers of parents and teachers to the question „Do you, when publishing information related to your daughter’s/sun’s/schoolchildren’s personal data on the Internet, familiarize with the website’s privacy policy (how and what for personal data may be used, what are your rights, responsibility and etc.) or set privacy settings?” 2.3.3. Implementation of rights of data subjects In respect of answers to the question „Who do you think should familiarize children with the possible infringements of personal data on the Internet and remedies to avoid them?” 95% of parents, 94% of teachers and 89% of service providers think that this is a duty of parents, 94% of teachers consider it is to be their obligation. Children do not have such clear opinion – 57% of them think that it should be done by parents, 58% - by teachers, 54 % think that they should have interest themselves. Analysis of service providers’ answers showed that almost half - 44% - of them are of the opinion that teachers should familiarize children with possible infringements of personal data on the Internet and remedies to avoid them or children should have interest themselves, 33% think that it is the duty of manager of the website. As regards other most frequent answers, 54% of parents, 56% of teachers, 37% of children and 33% of service providers indicated it is to be duty of the media, 25% of children and 22% of service providers think it should be done by State Data Protection Inspectorate. 53 Children Parents Teachers Service providers 89% 94% 95% Parents 57% 44% Teachers 58% 33% 37% 22% Manager of the website 6% SDPI* 6% Friends Non-governmental organizations Other 3% 0% 1% 0% 2% 2% 0% 35% 94% 56% 54% The media Children should have interest themselves 73% 44% 54% 33% 38% 34% 22% 13% 25% 11% 9% 22% 11% 10% 11% 20% 40% 60% 80% 100% Figure 25. Analysis of the answers to the question „Who do you think should familiarize children with the possible infringements of personal data on the Internet and remedies to avoid them?”(* - State Data Protection Inspectorate). According to the results of the survey, in case of breach of right to the protection of personal data, 33% of parents and 38% of teachers would firstly contact (or suggest for a schoolchild to do it) State Data Protection Inspectorate, 28% of parents and 29% of teachers - the manager of the website, 25% and 26% respectively – the Children’s Right Ombudsman Institution. These three options were the most popular among respondents. 10% of parents indicated other institution (4 of 11 respondents indicated police) (Figure 26). 54 Parents Teachers SDPI* 33% 29% 28% Manager of the website 26% 25% CROI** Court 3% 3% Other institution 3% Would not contact anybody 38% 10% 0% 1% 0% 10% 20% 30% 40% Figure 26. Analysis of parents’ and teachers’ answers to the question “Whom would you firstly contact yourself (or recommend for a schoolchild to contact) in case his/her right to the protection of personal data was breached?” (*- State Data Protection Inspectorate; ** - Children’s Rights Ombudsman Office). The results of the survey showed that data subjects are not very active in exercising their rights. The service providers indicated that they have never received data subjects’ complaints or requests to provide the information on how their personal data was processed, the sources or purpose of processing. Furthermore, no data subjects asked to withdraw their consent of the processing of their personal data. 33% of service providers indicated that they have received requests to destroy or terminate processing of personal data from data subjects and only one service provider specified that he was asked to rectify the personal data published on its website (Figure 27). 55 No data subject referred to me yet 56% To erase his personal data or terminate any operations of processing upon personal data 33% To correct inaccurate, incomplete or incorrect personal data 11% Willing to withdraw the consent to process 0% his personal data To explain the purposes for which his 0% personal data are collected To provide information from which sources and which personal data are collected and 0% processed 0% 20% 40% 60% Figure 27. Data subjects’ requests to service providers 2.4. Conclusions 2.4.1. Internet Usage 2.4.1.1. Children activities on the Internet As regards activities performed on the Internet, the most popular ones are downloading music, films and etc. (39% of children do it every day, 37% - several times a week), and collecting information (22% do it every day, 45% - several times a week). The survey also showed that 20% of children load (circulate) information about himself/herself or his/her friends on the Internet, 19% chat with unknown person several times a week. Taking into account that such activities could lead to very serious infringements of children’s rights or even crimes, it is very important that children knew possible consequences and rules they should respect in order to avoid such breaches. 31% of parents don’t know whether their children chat with unknown persons and 22% are not aware whether they load (circulate) information about themselves or their friends on the 56 Internet. In conclusion, it could mean that they have never been interested in or their children don‘t want to talk with them about it. 2.4.1.2. Usage of social networks According to the survey results, social networks are widely used by children, parents and teachers as well. 53% of respondents among children daily use international social network Facebook, and 21% use Lithuanian website One.lt or other social networks or dating websites. The majority of adults (65% of teachers and 53% of parents use Lithuanian website Klase.lt, 53% and 58% respectively use Facebook) use social networks or dating sites, so they should be quite aware about the peculiarities of such types of websites, but it is also important that they were concerned with possible threats to privacy. Taking into account such widespread usage of social networks among children, it is very important that children knew possible dangers they are faced with and how to use tools provided by controllers of these websites in order to protect privacy. On the other hand, controllers of such websites should take appropriate actions to limit the risks with regard to children. 2.4.2. Personal Data 2.4.2.1. Understanding personal data The answers to the question “What, in your opinion, is personal data?” disclosed great difference between the opinions of respondents (children, parents and teachers) – from 17% to 97%. Taking into account that all categories of data – even school name, if it would be related to particular person (for example, schoolchild, teacher) whose identity could be directly or indirectly revealed - are personal data, awareness of children, parents and teachers concerning definition of personal data should be raised. The same could be said about opinion of respondents on possible threats associated with the personal data disclosure on the Internet. 2.3.2.2. Publication of personal data on the Internet The results showed that the majority of children (more than 70%) never share their personal identification number, home address and information related to their religion and illnesses. On the other hand, the most revealed personal data appeared to be name and surname (92%) and email address (87%). 57 Worrying is the fact that children rarely question the necessity to provide correct personal data when they register on various Internet websites. Almost half (45%) of the children always or often provide correct information during the registration process on Internet websites and even 55% always or often say truth to those with whom they socialize. Other unadvisable behavior on the Internet is publication of personal data of other people – more than 60% of children are engaged in this activity and only 1/3 of them always receive consent of a person concerned. 20% of parents often publish information related to their children on the Internet, but only 49% of them always familiarize themselves with the website’s privacy policy or set privacy settings. It means that awareness of adults about necessity to get acquainted with privacy policy and set privacy settings should be raised. 2.4.2.3. Understanding threats of disclosure of personal data on the Internet As regards opinion of respondents on possible threats associated with the personal data disclosure on the Internet, almost all options were indicated by more than half of respondents. 85% of teachers, 79% of parents and 72% of children indicated misappropriation of identity in order to make a purchase or perform, for example, cash transactions on behalf of another person as the most possible threat, and 78% of service providers – unsolicited advertising for commercial purposes (SPAM). Worrying is the fact that 10 % of children don’t think there are any threats. Parents nor teachers don’t think it’s not important to talk about privacy, personal data and threats associated with the personal data disclosure on the Internet with the children/schoolchildren, so it is very important that they have enough knowledge and provide children with correct information, especially taking into account that 50% of parents and even 68% of teachers think that children are not quite aware about such threats. 2.4.2.4. Privacy violations on the Internet As regards to facing violations of using personal data on the Internet, the majority of children said that they have never experienced indicated cases related to privacy violations on the Internet. The most experienced case is receiving unwanted proposals – 19% of children more than once received unwanted proposals by phone or e-mail. 10% said that more than once his/her photo was circulated on the Internet without his or her consent. 58 It seams that parents do not have enough information about threats their children are facing on the Internet. As it was already mentioned, 10% of children said that more than once their photos or videos were circulated on the Internet without their consent, but only 3% of parents indicated that they knew about more than one of such cases. In respect to answers of teachers, 29% said that one or more than one of such cases is known to them. Similar situation is with all indicated cases, so in conclusion, teachers are more aware about violations of data protection and privacy of schoolchildren on the Internet. It could mean that teachers are more interested in schoolchildren‘s activities on the Internet, or that children are more linked to talk about it with teachers than with parents. 2.4.3. Protection of Personal Data 2.4.3.1 Measures to ensure better protection of children’s personal data on the Internet The most important data protection measure for parents (73%) and service providers (100%) seems to be formal and informal education of children, for teachers (59%) – stricter parental control over children, for children (56%) – propagation of “Safe Internet” idea (this measure is also quite important for service providers – 67%, teachers – 47%, parents – 39%). Taking into account that all of the respondents think that educational tools should be improved, great attention has to be paid to elaborating formal and informal education, propagating „Safe Internet“ idea and strengthening understanding of personal responsibility of users. Adults should be informed how to use programs limiting children’s activity on the Internet. The majority of service providers also advice to enhance self-regulation (78%), legislative (56%) and organizational (44%) personal data protection measures. 2.4.3.2 Privacy policy The study has shown that service providers are quite knowledgeable and concerned about personal data protection of their website visitors. Although according to the Lithuanian data protection laws, service providers are not directly obliged to have a privacy policy (when the privacy policy differs from the personal data processing rules) and to publish it on the website, all of the service providers participating in the survey, except one, have the privacy policy for their websites. According to the survey results, it seems that children don’t understand the necessity to familiarize themselves with privacy policy – 26% do it only sometimes, 17% never do it and 13% don’t even think it is necessary. Children have to be informed that in order to ensure personal data and privacy protection 59 on the Internet, they should always familiarize themselves with privacy policy and select appropriate privacy settings. It is also very important that they understand the necessity and meaning of these actions. 2.4.3.3 Implementation of rights of data subjects The results of the survey show that data subjects implement their rights very passively. The few requests which service providers received from data subjects included the request to destroy or terminate the processing of personal data and to rectify the personal data published on the website. According to the survey data subjects have never tried to use their other data protection rights, such as to receive information about processing of their personal data by the service provider, to withdraw the consent for the processing, etc. With regard to obligation to familiarize children with the possible infringements of personal data on the Internet and remedies to avoid them the vast majority of adults - 95% of parents, 94% of teachers and 89% of service providers think that this is a duty of parents. 94% of teachers consider it is to be their obligation. Children do not have such clear opinion – 57% of them think that it should be done by parents, 58% - by teachers, 54 % think that they should have interest themselves. Those who are directly involved in children‘s activities on the Internet and their everyday life (managers of websites, parents, teachers) should have primary obligation to familiarize children with the possible infringements of personal data on the Internet and remedies to avoid them. Media, state institutions, such as State Data Protection Inspectorate and others, NGO’s also have to play their role in this field. In order for these activities to be effective, children should have great interest themselves. 60 Appendix I. Questionnaires These questionnaires were prepared in Lithuanian language and translated into English. The English translation was adapted in Italy to local context. QUESTIONNAIRE FOR CHILDREN 1. What, in your opinion, is personal data? [An unlimited number of answers are allowed] name, surname father's name photo e-mail address mobile phone number information related to person’s religious beliefs information related to health personal code home address school name 2. How often do you use these social networks, dating sites? [Tick one answer in each row] Every day One.lt Frype.lt Klase.lt Draugas.lt MySpace LinkedIn Twitter Facebook Pazintys.lt Other Several times a week Once a month Several times a year Do not use 3. How often do you carry out these activities on the Internet: [Tick one answer in each row] Every day Sever al Once a month Several times a I don’t do this 61 times a week Collect information on the Internet Load (circulate) information about himself/herself or his/her friends (photos, video clips, text messages and etc.) Chatting with the unknown person on the Internet Download music, films and etc. Other (specify) year at all 4. Do you provide correct personal data – name, surname, date of birth, etc. – when registering in various sites on the Internet? Always Often Sometimes Never If I am asked to provide my personal data I do not register 5. While communicating on the Internet (for ex. in social networks or dating sites) do you provide correct (unfabled) information about yourself for those with whom you socialise? Always Often Sometimes Never 6. Do you, when publishing information related to your own or your friend’s personal data on the Internet, familiarize with the website’s privacy policy (how and what for personal date may be used, what are your rights, responsibility and etc.) or set privacy settings □ □ □ □ □ Always Often Sometimes Never I don’t think it’s necessary 7. What are possible threats associated with the personal date disclosure on the Internet: [3 possible response options] 62 Misappropriation of identity in order to make a purchase or perform, for example, cash transactions on behalf of another person use of personal data for commercial purposes electronic harassment to intimidate another person or to cause tension unsolicited advertising and commercial messages (SPAM) photos, used for advertising or placed in erotic websites I don’t think there are any threats Other (please specify)____________________________________________________ 8. Who do you think should familiarize children with the possible infringements of personal data on the Internet and remedies to avoid them? [Select 3 most important response options] Parents Friends Teachers Children should have interest themselves The media Non-governmental organizations State Data Protection Inspectorate Manager of the website Other (specify) 9. Do you receive a consent from your friends before publishing their personal data (photos, information about certain details of their lives) on the Internet? Always Often Sometimes I do not think it is necessary I do not publish data of my friends 10. Have you ever experienced such cases: [Tick one answer in each row] Yes, more than once Having no consent your photo or video clip about you was circulated on the Internet Having no consent your name and surname, home address, Yes, once No This has happened to my friends 63 mobile phone number and etc. was circulated on the Internet False information about you was circulated on the Internet Your identity was misappropriated by the unknown person on the Internet You received an unwanted proposal by phone or e-mail from the unknown person 11. Which information about yourself do you provide in Internet sites? [Tick one answer in each row] Always Often Sometimes Never Name and surname Telephone number e-mail address ID number Home address School name Illnesses you have Your faith Extracurricular activity groups 12. Which measures could ensure better protection of children’s personal data on the Internet? [choose 3 most important answers] Formal and informal education of children, awareness-raising campaigns of ‘Safe Internet’ idea Programs limiting browsing on the Internet according to the keywords Better laws Greater responsibility of website administrators Personal responsibility of the user Stricter parental control over children Other (please specify) Propagation 13. Your age 13 – 14 years old 15 – 16 years old 64 17 – 18 years old 14. You are: Male Female 15. Your living place is: Vilnius Kaunas, Klaipėda, Šiauliai, Panevėžys Another city Country-side area 65 QUESTIONNAIRE FOR PARENTS 1. What, in your opinion, is personal data? [An unlimited number of answers are allowed] name, surname father's name photo e-mail address mobile phone number information related to person’s religious beliefs information related to health personal code home address school name 2. Which of these social networks / dating sites are you a registered user: One.lt Frype.lt Klase.lt Draugas.lt MySpace LinkedIn Twitter Facebook Pazintys.lt Supermama.lt Other I do not register 3. Do you publish information related to your daughter’s/son’s personal data (their photos, information on certain details of their lives) on the Internet? □ □ □ □ Always Often Sometimes Never 4. Do you, when publishing information related to your daughter’s/son’s personal data on the Internet, familiarize with the website’s privacy policy or set privacy settings □ □ □ □ □ Always Often Sometimes Never I don’t think it’s necessary 66 5. How often do your children carry out these activities on the Internet: [Tick one answer in each row] Every day Collect information on the Internet Load (circulate) information about himself/herself or his/her friends (photos, video clips, text messages and etc.) Chatting with the unknown person on the Internet Download music, films and etc. Other (specify) Sever al times a week Once in a month Several times a year They don’t do this I don’t know 6. Do you think children have enough knowledge on possible threats associated with the personal date disclosure on the Internet: □ Yes □ No □ I don’t know 7. What are possible threats associated with the personal date disclosure on the Internet: [3 possible response options] Misappropriation of identity in order to make a purchase or perform, for example, cash transactions on behalf of another person use of personal data for commercial purposes electronic harassment to intimidate another person or to cause tension unsolicited advertising and commercial messages (SPAM) photos, used for advertising or placed in erotic websites I don’t think there are any threats Other (please specify)____________________________________________________ 8. Have you ever talked on privacy, personal data and threats associated with the personal date disclosure on the Interne with your children? 67 Yes No I don‘t think it‘s important There was no need as they already knew about it It‘s not upon my responsibility 9. Who do you think should familiarize children with the possible infringements of personal data on the Internet and remedies to avoid them? [Select 3 most important options] Parents Friends Teachers Children should have interest themselves The media Non-governmental organizations State Data Protection Inspectorate Manager of the website Other (specify) 10. Has your son/daughter ever faced these cases? [Tick one answer in each row] Yes, more than once Having no consent photo or video clip of your child was circulated on the Internet Having no consent name and surname, home address, mobile phone number and other personal data of your child was circulated on the Internet False information about your child was circulated on the Internet Your child’s identity was misappropriated by the unknown person on the Internet An unwanted proposal was received by phone or e-mail from the unknown person by your child Yes, once No Don’t know 68 11. Whom would you firstly contact in case your son’s/daughter’s right to the protection of personal data was breached: [Choose one the most important response option] Manager of the website State Data Protection Inspectorate Court Children’s Rights Ombudsman Institution Other institution (please specify) I would not contact nobody, because it is not upon my responsibility 12. Which of the measures could ensure better protection of childrens’ personal data on the Internet? [Choose 3 most important response options] Formal and informal education of children, awareness-raising campaigns of ‘Safe Internet’ idea Programs limiting browsing on the Internet according to the keywords Better laws Greater responsibility of website administrators Personal responsibility of the user Stricter parental control over children Other (please specify) Propagation 13. You are: Male Female 14. Your living place is: Vilnius Kaunas, Klaipėda, Šiauliai, Panevėžys Another city Country-side area 15. Your education: □ University, uncompleted university □ Secondary, specialised secondary □ Uncompleted secondary 16. You are: 30 years old or younger 31-40 years old 41-50 years old 51 years old or older 69 QUESTIONNAIRE FOR TEACHERS 1. What, in your opinion, is personal data? [An unlimited number of answers are allowed] name, surname father's name photo e-mail address mobile phone number information related to person’s religious beliefs information related to health personal code home address school name 2. Which of these social networks / dating sites are you a registered user: One.lt Frype.lt Klase.lt Draugas.lt MySpace LinkedIn Twitter Facebook Pazintys.lt Supermama.lt Other I do not register 3. Do you publish information related to schoolchildren’s personal data (their photos, information on certain details of their lives) on the Internet? □ □ □ □ Always Often Sometimes Never 4. Do you, when publishing information related to schoolchildren’s personal data on the Internet, familiarize with the website’s privacy policy or set privacy settings □ □ □ □ □ Always Often Sometimes Never I don’t think it’s necessary 70 5. Do you think children have enough knowledge on possible threats associated with the personal date disclosure on the Internet: □ □ □ Yes No I don’t know 6. What are possible threats associated with the personal date disclosure on the Internet: [3 possible response options] Misappropriation of identity in order to make a purchase or perform, for example, cash transactions on behalf of another person use of personal data for commercial purposes electronic harassment to intimidate another person or to cause tension unsolicited advertising and commercial messages (SPAM) photos, used for advertising or placed in erotic websites I don’t think there are any threats Other (please specify)____________________________________________________ 7. Have you ever talked on privacy, personal data and threats associated with the personal data disclosure on the Interne with the schoolchildren? Yes No I don‘t think it‘s important There was no need as they already knew about it It‘s not upon my responsibility 8. Who do you think should familiarize children with the possible infringements of personal data on the Internet and remedies to avoid them? [Select 3 most important response options] Parents Friends Teachers Children should have interest themselves The media Non-governmental organizations State Data Protection Inspectorate Manager of the website Other (specify) 71 9. Are you aware of such cases? [Tick one answer in each row] Yes, more than one case is known Having no consent of the child (his/her parents) schoolchild’s photo or video clip was circulated on the Internet Having no consent of the child (his/her parents) schoolchild’s name and surname, home address, mobile phone number and etc. was circulated on the Internet False information about the schoolchild was circulated on the Internet Schoolchild’s identity was misappropriated by the unknown person on the Internet An unwanted proposal was received by phone or e-mail from the unknown person by the schoolchild Yes, one case is known No cases are known This has happened to my son/daughter 10. Which of the measures could ensure better protection of children’s personal data on the Internet? [Choose 3 most important response options] Formal and informal education of children, awareness-raising campaigns of ‘Safe Internet’ idea Programs limiting browsing on the Internet according to the keywords Better laws Greater responsibility of website administrators Personal responsibility of the user Stricter parental control over children Other (please specify) Propagation 11. Whom would you firstly contact yourself or recommend for a schoolchild to contact in case his/her right to the protection of personal data was breached: [Choose one the most important response option] Manager of the website State Data Protection Inspectorate 72 Court Children’s Rights Ombudsman Institution Other institution (please specify) I would not contact nobody, because it is not upon my responsibility 12. You are: Male Female 13. Your living place is: Vilnius Kaunas, Klaipėda, Šiauliai, Panevėžys Another city Country-side area 14. What is the education institution that you work for: □ Pre-primary school □ Primary school □ Basic school □ Secondary school □ Gymnasium □ Vocational training school You are: 30 years old or younger 31-40 years old 41-50 years old 51 years old or older 73 QUESTIONNAIRE FOR DATA CONTROLLERS 1. To which group of data controllers do you belong? Social network controller Dating site controller Chat controller Recreational site Other (please specify) 2. Please indicate how many people visit your website every day? not more than 1000 1001-10000 10001-50000 50001-100000 more than 100001 3. How many percent of your site’s visitors constitute children from 13 to 18 years old? not more than 5 % 6 % -10 % 11 % -20 % 21 % -30 % 31 % -50 % more than 51 % 4. Which measures could ensure better protection of children’s personal data on the Internet? [choose 3 most important response options] Formal and informal education of children, awareness-raising campaigns Propagation of ‘Safe Internet’ idea Programs limiting browsing on the Internet according to the keywords Better laws Greater responsibility of website administrators Personal responsibility of the user Stricter parental control over children Other (please specify) 5. What are possible threats associated with the personal date disclosure on the Internet: [choose 3 most important response options] Misappropriation of identity in order to make a purchase or perform, for example, cash transactions on behalf of another person use of personal data for commercial purposes electronic harassment to intimidate another person or to cause tension 74 unsolicited advertising and commercial messages (SPAM) photos, used for advertising or placed in erotic websites I don’t think there are any threats Other (please specify)____________________________________________________ 6. According to your opinion, which measures specified below are insufficient and should be improved in order to guarantee comprehensive personal data protection on the Internet: [choose 3 most important response options] legal technical organisational educational self-regulation other (please specify) 7. As a controller of an internet site, do you have a privacy policy? Yes I have No, I do not have I do not have but I plan to have it in the future I do not think it is necessary 8. Mostly people refer to you asking: [3 possible response options] to provide information from which sources and which personal data are collected and processed to explain the purposes for which his personal data are collected to correct inaccurate, incomplete or incorrect personal data to erase his personal data or terminate any operations of processing upon personal data willing to withdraw the consent to process his personal data no data subject referred to me yet 9. Who do you think should familiarize children with the possible infringements of personal data on the Internet and remedies to avoid them? [choose 3 most important response options] Parents Friends Teachers Children should have interest themselves The media Non-governmental organizations 75 State Data Protection Inspectorate Manager of the website Other (specify) 76